CVE-2019-14339

CVE-2019-14339 Inyección de URI de Content Provider en Canon PRINT 2.5.5 CVE-2019-14339. Prueba de concepto por @0x48piraj El ContentProvider en la aplicación Canon PRINT 2.5.5 para Android no restringe adecuadamente el acceso a los datos. Esto permite que una aplicación maliciosa de un atacante...

CVE-2020-3452

CVE-2020-3452 TL;DR Este es un exploit para CVE-2020-3452. No está completamente terminado aún. Úsalo en un contexto legal. Si la cagas, es tu problema. ¿Qué es esto? Este es un intento rápido y sucio de mejorar el PoC original de CVE-2020-3452. En la etapa actual, no hay nada más que un simple...

Scalar-Venom-Attack

This paper analyzes cryptographic vulnerabilities discovered in modern cryptographic key management infrastructure, with a particular focus on critical flaws in the architecture of hardware security modules HSMs when handling elliptic curve private keys. The study focuses on a class of attacks th...

CVE-2019-9810

CVE-2019-9810 Exploit para Firefox en Windows CVE-2019-9810 es una vulnerabilidad que fue encontrada y explotada en Pwn2Own 2019 por Richard Zhu y Amat Cama. Afecta al motor JavaScript de Mozilla, SpiderMonkey, y fue utilizada para comprometer el renderizador. El problema fue solucionado en...

Cordon

Cordon ⚠️ PROJECT DEPRECATED Development on this project has been stopped because someone else was working on the same idea and built a better solution. We highly recommend checking out:Fence by Use-Tusk. Note: This repository was originally created forFOSS HACK 2026 , though we unfortunately...

react2shell-scanner

🚨 React2Shell Scanner CVSS 10.0 RCE in React Server Components. Is your React 19 app vulnerable? Fast, accurate scanner for CVE-2025-55182 React2Shell - a critical remote code execution vulnerability exploited in the wild. Zero false positives with intelligent Server Components detection. 🚨 About...

CVE-2017-5618-Screen-4.5.0-Root

GNU Screen 4.5.0 Local Privilege Escalation Exploit CVE-2017-5618 📌 Overview Local privilege escalation exploit for GNU Screen 4.5.0 that hijacks shared library loading to gain root access via ld.so.preload manipulation. 🔧 Technical Details Vulnerability: CVE-2017-5618 Type: Shared Library...

CIMCown

CIMCown CVE-2026-20200 Argument Injection in Cisco IMC with RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...

LOG4J-CVE-2021-44228

LOG4J-CVE-2021-44228 Log4Shell — también conocido como CVE-2021-44228 — es una vulnerabilidad crítica que permite la ejecución remota de código en sistemas que utilizan Log4j de la Apache Foundation, que es una biblioteca Java de código abierto ampliamente utilizada en productos de software...

Drupal-cve-2019-6340

Research CVE 2019-6340 root@kitploit: The site as Drupal 8 core RESTful API Services module gets enabled and allows the user to send GET, PATCH or POST Request to the server. GET request is enough to trigger the code execution vulnerability even though PATCH method is disabled The site has any...

EUVD-2026-70852

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects the function ChapterModel::searchChapter of the file App/Home/Controller/ChapterController.class.php of the component Query Builder. The manipulatio...

CVE-2026-85379 light0011 cms Query Builder ChapterController.class.php searchChapter sql injection

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects the function ChapterModel::searchChapter of the file App/Home/Controller/ChapterController.class.php of the component Query Builder. The manipulatio...

CVE-2026-85379 light0011 cms Query Builder ChapterController.class.php searchChapter sql injection

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects the function ChapterModel::searchChapter of the file App/Home/Controller/ChapterController.class.php of the component Query Builder. The manipulatio...

CVE-2026-85379

light0011 CMS contains a SQL injection vulnerability in the Query Builder component, specifically in the function ChapterModel::searchChapter within App/Home/Controller/ChapterController.class.php. The flaw is triggered by manipulation of the content argument and can be exploited remotely without...

ansible-role-cve

Ansible Role: CVE This role mitigates/patches the defined CVEs. Role Variables Dirty COW vuln. http://dirtycow.ninja. Defaults to false. This mitigation will need to be run everytime the server it has been applied on restarts. root@kitploit: cve20165195: false Example Playbook root@kitploit: --- ...

PT-2026-85444

An incorrect authorization vulnerability in MISP allowed authenticated users to delete attributes from events despite lacking the required perm modify or perm modify org permissions. The affected attribute deletion paths relied on organization membership checks performed by...

PT-2026-85522

A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of the component API Key Handler. Such manipulation of the argument api key api.user leads to improper privilege management. The attack may be...

PT-2026-86235

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for...

PT-2026-86259

A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected is the function conversation of the file server/backend.py of the component Backend Conversation API. Such manipulation of the argument model leads to missing...

PT-2026-85523

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...